Windows

General discussion

Slow logon at a domaincontroller console

Our domain controllers are all 2003. When logging on to the console (or by Remote Desktop) of a domain controller, it can take several minutes (even 10min) before the start button apprears after typing in username and password. It seems that the slow down is because of drive mappings that the site gpo is trying to do (mapping to itself) which it isn't really happy with. It eventually runs all scripts but takes a long time to log on. Any ideas? Any way to cause the site GPO to not run when logging on to the DC itself?

All Comments

Log onto the DC's, with accounts that are set up that don't have log on scripts and roaming profiles etc. Also you can use Group policy that can "allow only local profiles", you can use a "loopback policy" so that any group policies the user usually has won't be enforced on the Domain controllers, but instead only policies that are DC specific will apply ( for example no log on scripts will run etc.)http://support.microsoft.com/kb/231287/EN-US/

If you have a site GPO in your domain, and because it is a "user level GPO", you just simply have to go in the GPO console (W2K3) and remove the administrators group from the list to which the GPO is applied. In W2K you had the option to deny the "applicabillity" of a GPO for a specific group of users. Or create another GPO at the DC OU level, and set it to "block inheritance".

I had thought about that but I wanted to avoid not do it because currently it applies to authenticated users. I want it to apply to everyone that logs on in this site - on all computers except the domain controller itself.

To ensure the fastest, disable the Always wait for the network at computer startup and logon policy setting. This setting is in the Computer Configuration\Administrative Templates\System\Logon node of the Group Policy Object Editor.

Start or search

Create a new discussion

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Post type

Subject title

Topic Tags

Select up to 3 tags (1 tag required)

Cloud

Piracy

Security

Apple

Microsoft

IT Employment

Google

Open Source

Mobility

Social Enterprise

Community

Smartphones

Operating Systems

Windows

Mac

Malware

Tablets

Networking

Browser

Hardware

Software

Web Developerment

Linux

Off Topic

Message Body

Track this discussion and email me when there are updates

Please note: Do not post advertisements, offensive material, profanity, or personal attacks. Please remember to be considerate of other members. If you're new to the TechRepublic Forums, please read our TechRepublic Forums FAQ. All submitted content is subject to our Terms Of Use.